But still, the original argument was that you have to worry about chain analysis because everything is public, but obviously that isn't true, no matter if an exchange may or maybe not inadvertently leak something.
Or, they have wallets that acts as combined input/output for all/groups of users.
I don't know a single big exchange that generates exactly one wallet per user and uses that one always for the same user.
When you think about it, it makes a lot of sense they do it like that.
A friend of mine became insanely wealthy just off of Bitcoin. Immediately went off the grid a few years (back in 2017). Now owns a precious metals mining company in South America. Still holds Bitcoin, lives comfortably to a point, changed passports to evade sanctions (he was Russian), and even has a kind of his own private army, that's mostly involved in the mining business.
You wouldn't figure all of that out by simply looking at him, but strike him now and you'd have to contend against a few major governments at this point.
The answer is to live anonymously. Don’t flash the cash.